General
-
Target
2024-05-17_88827d9f6acc3cd621a7913d5171fa48_cryptolocker
-
Size
129KB
-
Sample
240517-k7njaabd97
-
MD5
88827d9f6acc3cd621a7913d5171fa48
-
SHA1
0180b93fe3d7a45eb80755921df49f899b2aaa0e
-
SHA256
a0eaa776d77cdfeb57007309367425abb03e18790e74b9e558df381ed8b42234
-
SHA512
a96efb51b16cb49e9d8fbee7278a4f06f732eb6e33318a521d08203b96d73adb42f8c9011910b041ea8db376884d90190b1ebd317cd346fedf527737a6fcbda4
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//j8:vCjsIOtEvwDpj5H9YvQd2Ri
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_88827d9f6acc3cd621a7913d5171fa48_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-17_88827d9f6acc3cd621a7913d5171fa48_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-17_88827d9f6acc3cd621a7913d5171fa48_cryptolocker
-
Size
129KB
-
MD5
88827d9f6acc3cd621a7913d5171fa48
-
SHA1
0180b93fe3d7a45eb80755921df49f899b2aaa0e
-
SHA256
a0eaa776d77cdfeb57007309367425abb03e18790e74b9e558df381ed8b42234
-
SHA512
a96efb51b16cb49e9d8fbee7278a4f06f732eb6e33318a521d08203b96d73adb42f8c9011910b041ea8db376884d90190b1ebd317cd346fedf527737a6fcbda4
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//j8:vCjsIOtEvwDpj5H9YvQd2Ri
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-